AWS res documentation change
Summary
Added optional Cognito user pool creation section with required custom attributes and updated proxy configuration command
Security assessment
This change adds documentation for optional Cognito user pool setup and updates a proxy configuration command. While authentication is security-related, this documentation doesn't address specific vulnerabilities or add security documentation beyond standard feature documentation.
Diff
diff --git a/res/archive/release-minus-2/ug/prerequisites.md b/res/archive/release-minus-2/ug/prerequisites.md index e84ea3964..308724798 100644 --- a//res/archive/release-minus-2/ug/prerequisites.md +++ b//res/archive/release-minus-2/ug/prerequisites.md @@ -5 +5 @@ -Create an AWS account with an administrative userCreate an Amazon EC2 SSH key pairIncrease service quotasCreate a custom domain (optional)Create domain (GovCloud only)Provide external resourcesConfigure LDAPS in your environment (optional)Service Account for Microsoft Active DirectoryConfigure a private VPC (optional) +Create an AWS account with an administrative userCreate an Amazon EC2 SSH key pairIncrease service quotasCreate a Cognito user pool (Optional)Create a custom domain (optional)Create domain (GovCloud only)Provide external resourcesConfigure LDAPS in your environment (optional)Service Account for Microsoft Active DirectoryConfigure a private VPC (optional) @@ -16,0 +17,2 @@ Create an AWS account with an administrative userCreate an Amazon EC2 SSH key pa + * Create a Cognito user pool (Optional) + @@ -69,0 +72,12 @@ Your AWS account has default quotas, formerly referred to as limits, for each AW +## Create a Cognito user pool (Optional) + +You have the option to import an existing Cognito User Pool for user and client authentication when you install RES. Otherwise, RES will create a new Cognito User Pool automatically. The pre-existing User Pool needs to have the following sign-up custom attributes: + +Name | Type | Min value/length | Max value/length | Mutable +---|---|---|---|--- +custom:aws_region | String | | | TRUE +custom:cluster_name | String | | | TRUE +custom:password_last_set | Number | | | TRUE +custom:password_max_age | Number | | | TRUE +custom:uid | Number | 2000200001 | 4294967294 | TRUE + @@ -346 +360 @@ If you are setting up `http_proxy` and `https_proxy` environment variables, the - " > /etc/environment + " >> /etc/environment launch template